Security Analyst – Governance, Trust
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Security Analyst maintaining customer trust artifacts and AI governance workflows. Supporting Chainguard’s secure, production-ready open-source software supply chain.
Responsibilities:
- Maintain and improve the internal corpus of responses used for customer security questionnaires.
- Keep Trust Center content and public go-to-market security materials accurate and up to date.
- Maintain customer-facing security artifacts used during the sales process.
- Ensure security documentation reflects current products, practices, and architecture.
- Establish repeatable processes for reviewing, updating, versioning, and publishing assurance content.
- Identify gaps, inconsistencies, and outdated information before materials are shared with customers.
- Maintain and update AI agents used by the Governance and Trust function.
- Audit agents regularly for accuracy, quality, reliability, and drift.
- Refresh agent instructions, prompts, reference content, and supporting information as requirements change.
- Help define standards for maintaining AI-enabled workflows in a security and governance context.
- Document agent behavior, changes, known limitations, and review outcomes.
- Partner with stakeholders to improve the reliability and usefulness of AI-assisted security work.
Requirements:
- Experience in security assurance, security operations, GRC, customer trust, or a related security function.
- Experience maintaining security questionnaires, Trust Center content, data flow diagrams, audit evidence, or other customer-facing security artifacts.
- Strong attention to detail and a disciplined approach to documentation, version control, and quality review.
- Comfort working with AI models or AI-enabled workflows, including maintaining models or agents rather than building models from scratch.
- Familiarity with prompt engineering, prompt evaluation, or similar techniques for improving AI system performance.
- Ability to assess whether AI-generated outputs are accurate, complete, and aligned with current source information.
- Strong written and verbal communication skills, with the ability to translate technical and security concepts into clear customer-ready content.
- Ability to work independently in a fast-paced environment and manage multiple priorities.
- Sound judgment, curiosity, and a continuous-improvement mindset.
- Experience supporting customer security reviews or responding to security questionnaires.
- Experience with Trust Centers, security documentation libraries, or assurance content management.
- Experience auditing AI agents, evaluating prompts, or maintaining retrieval and reference content.
- Familiarity with security governance, risk, compliance, or responsible AI practices.
- Experience creating or maintaining technical artifacts such as data flow diagrams.
Benefits:
- Flexible & Remote-First Culture: Work remotely with team meetup opportunities, bi-annual destination summits, and a monthly stipend for coworking spaces, phone and internet costs.
- Stock options upon hire and promotion.
- Participation in secondary offerings.
- 10 years to exercise stock options.
- 100% covered health, vision, and dental insurance premiums for the employee and dependents.
- ∞ Flexible Time Off.
- 18 weeks paid parental leave for birthing parents and 12 weeks for non-birthing parents, usable all at once or throughout the child's first year.
Similar Jobs
Security Analyst – Governance, Trust
Security Analyst maintaining customer security assurance content and AI-agent governance. Supporting Chainguard, a provider of hardened open-source software, in scaling trusted security operations.
Cyber Security Analyst
Cyber Security Analyst protecting World Business Lenders' real estate-secured business lending systems. Monitoring alerts, investigating incidents, and improving security controls remotely.
Senior Security Analyst, MDR
Senior Security Analyst joining Artemis's MDR service, Apollo, as a founding analyst. Investigating and responding to threats across customer cloud, identity, endpoint, and SaaS environments.
Identity & Access Management Analyst – IT Security
Remote IAM Analyst managing access controls, provisioning, PAM, MFA, and compliance for Guthrie’s integrated nonprofit healthcare organization.
Compliance & Security Analyst
Compliance analyst leading CMMC 2.0 and NIST 800-171 readiness for Logicalis clients. Authoring SSPs, managing remediation, and validating audit evidence.
Information Security Compliance Analyst
Information Security Compliance Analyst strengthening Data Recognition Corporation’s security compliance program. Managing GovRAMP, NIST RMF, SOC 2 audits, risk remediation, and business continuity initiatives.
Security Analyst – Penetration Testing
Analista de segurança conduzindo testes de intrusão e avaliações de vulnerabilidades para proteger clientes digitais da Stefanini Cyber. Atuando em ambientes web, mobile, cloud, AD e IoT/OT.
Security Analyst
Security Analyst managing vulnerability scanning and exposure programs for GuidePoint Security, a cybersecurity services provider. Advising customers and deploying vulnerability infrastructure across cloud and on-premise environments.
Senior Information Security Analyst
Analista sênior de segurança protegendo soluções digitais e serviços de TI da Hitss. Atuando com Microsoft Defender, firewalls, antivírus, proxy, SFTP e resposta a chamados.
Senior Security Analyst, MDR
Senior Security Analyst leading cloud, identity, endpoint, and SaaS investigations for Artemis's AI-driven defense platform. Shaping Apollo's managed detection and response service.
Security Analyst
Security Analyst protecting systems, data, and client information at Power Digital, an AI-native growth firm. Monitoring threats, managing vulnerabilities, and maintaining SOC 2 compliance.
Associate Security Analyst II
Security Analyst hunting threats across client environments for DirectDefense, a managed cybersecurity services provider. Monitoring SIEM/EDR systems and delivering actionable incident-response guidance.
Security Analyst I
Security Analyst I monitoring client environments, investigating threats, and supporting 24/7 incident response. Producing vulnerability reports and communicating findings to technical and executive audiences.
IT Security Analyst I – Evening Shift
IT Security Analyst monitoring security events and responding to incidents for VC3’s municipal and organizational IT clients. Investigating alerts, analyzing logs, and supporting threat hunting on an evening shift.
IT Security Analyst I
IT Security Analyst monitoring security events and responding to incidents for VC3, an IT services provider serving municipalities and organizations across the United States and Canada.
Cyber Security Analyst III – Digital Forensics, Incident Response
Cybersecurity analyst conducting digital forensics and incident response for the U.S. Department of Energy Hanford Site. Monitoring enterprise threats, investigating incidents, and supporting remediation.
Cybersecurity Analyst
Analista de Cyber Security protegendo soluções digitais da Click Cannabis para acesso responsável à cannabis medicinal. Condução de pentests, DevSecOps, segurança AWS e resposta a incidentes.
Principal Research Analyst – Information Security
Principal Research Analyst leading ISACA’s information security research, frameworks, and practitioner content. Representing the global technology association through thought leadership, events, and member guidance.
IT Security Analyst
IT Security Analyst supporting Signode’s SOC through threat detection, incident response, and malware analysis. Monitoring alerts, hunting threats, and improving security operations processes.
Associate Security Analyst
Security Analyst monitoring client environments, investigating threats, and tuning SIEM detections. DirectDefense delivers managed cybersecurity defense, vulnerability assessments, and compliance services.